$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32d69d90-d08b-3441-b934-76de056698c3.roa File: 32d69d90-d08b-3441-b934-76de056698c3.roa (raw, json) Hash identifier: oU6wQJXN8jJsc4kOSazGs9DIHenYHwOJb4LpkX0CvWk= Subject key identifier: B5:6F:07:BF:41:47:F7:B8:0B:EF:E0:B6:53:24:52:A4:DB:D8:C4:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD2DFE707B2841729C98980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32d69d90-d08b-3441-b934-76de056698c3.roa Signing time: Fri 25 Sep 2026 12:50:09 +0000 ROA not before: Fri 25 Sep 2026 12:50:09 +0000 ROA not after: Thu 24 Dec 2026 13:50:09 +0000 asID: 6079 IP address blocks: 68.165.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d2:df:e7:07:b2:84:17:29:c9:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:50:09 2026 GMT Not After : Dec 24 13:50:09 2026 GMT Subject: CN=4f2a24de-6026-4775-8d41-059db1bd420b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:a9:63:06:93:c9:9a:0a:c4:0c:83:41:56: be:25:bb:a3:1f:62:3d:5f:eb:3e:c4:58:e7:76:b4: 6d:cf:c4:7b:eb:5f:d6:86:3e:31:44:78:fe:da:74: 75:69:5c:fe:f7:26:98:3d:87:09:0e:ee:59:2b:2d: 65:2a:c6:0d:ce:92:66:a5:89:80:6d:62:08:88:70: ec:28:e9:a1:1d:69:87:d4:f2:c8:7f:52:c4:0c:33: b6:79:da:25:33:10:6a:42:f7:31:41:9d:d7:df:63: c1:ec:12:6e:63:b0:8f:6c:4d:74:af:6b:05:b5:5d: 52:5a:53:69:27:4b:6f:8d:eb:f2:49:df:d9:c9:0d: 60:75:ed:aa:c1:36:63:ee:e4:e1:c4:2e:6e:74:01: bf:90:82:cc:35:6e:16:16:80:4b:1b:b5:c9:d4:e4: aa:43:b6:d2:49:16:a8:26:71:29:a9:bc:a6:84:8a: 6c:53:4d:ea:d6:8b:12:ea:6a:6f:fc:13:6f:c4:03: aa:c6:00:01:0d:56:d1:45:05:fc:81:c2:1d:6e:a8: 50:04:66:53:bf:cc:45:cd:f3:11:63:ef:d3:2c:72: a2:88:85:5f:92:f2:77:d1:36:4a:c4:49:14:7f:b9: ba:24:5e:08:ca:15:bf:36:d3:27:cf:ce:ca:2a:30: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:07:BF:41:47:F7:B8:0B:EF:E0:B6:53:24:52:A4:DB:D8:C4:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32d69d90-d08b-3441-b934-76de056698c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d4:61:59:03:9f:aa:a4:90:d5:95:f8:a4:2d:59:29:4d:6b: 14:3b:d8:79:1e:bb:71:d1:9b:64:2c:e0:88:8b:35:d6:3b:8f: 4f:e9:5c:5b:d4:43:17:08:39:00:b7:de:24:15:75:37:14:a3: ac:ec:ac:83:a7:ad:6b:16:c6:41:8e:c9:4e:26:5e:b3:fd:11: e1:6e:0f:d6:20:38:48:a2:fa:97:95:78:49:2a:da:e3:f5:38: e1:c5:5d:f3:e9:14:2e:84:15:cd:ca:46:0e:64:31:21:82:8b: cb:4a:5a:f1:8c:a2:88:8e:3e:c2:78:46:8e:16:b6:47:70:07: da:a0:e8:6e:bb:fa:fb:aa:c8:db:2c:4f:9d:30:f4:7b:3f:b5: fc:6c:9b:a7:64:03:e6:a5:a0:60:78:83:bd:de:0a:66:c4:bf: 11:6e:7a:bd:5e:0b:46:3a:94:78:dd:89:3e:f7:f1:a3:7e:b2: d5:ce:69:01:c2:7d:f8:b6:b4:91:67:c1:7e:6c:07:15:6a:50: cb:16:5a:b1:62:5b:20:da:6e:00:3d:65:55:76:54:52:16:d3: c5:74:10:f8:8f:b5:ad:f5:56:c2:ac:8f:0c:36:e3:dc:47:1f: a0:fe:ad:65:7e:b8:ff:17:64:58:ce:d4:6e:31:23:d6:ff:0d: 1b:b3:af:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K0t/nB7KEFynJiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTAwOVoXDTI2MTIyNDEzNTAwOVowLzEtMCsGA1UEAxMk NGYyYTI0ZGUtNjAyNi00Nzc1LThkNDEtMDU5ZGIxYmQ0MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfupYwaTyZoKxAyDQVa+JbujH2I9X+s+xFjn drRtz8R761/Whj4xRHj+2nR1aVz+9yaYPYcJDu5ZKy1lKsYNzpJmpYmAbWIIiHDs KOmhHWmH1PLIf1LEDDO2edolMxBqQvcxQZ3X32PB7BJuY7CPbE10r2sFtV1SWlNp J0tvjevySd/ZyQ1gde2qwTZj7uThxC5udAG/kILMNW4WFoBLG7XJ1OSqQ7bSSRao JnEpqbymhIpsU03q1osS6mpv/BNvxAOqxgABDVbRRQX8gcIdbqhQBGZTv8xFzfMR Y+/TLHKiiIVfkvJ30TZKxEkUf7m6JF4IyhW/NtMnz87KKjCxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVvB79BR/e4C+/gtlMkUqTb2MR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzJkNjlkOTAtZDA4Yi0z NDQxLWI5MzQtNzZkZTA1NjY5OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnUYVkDn6qkkNWV+KQtWSlNaxQ72Hkeu3HRm2Qs4IiLNdY7j0/pXFvU QxcIOQC33iQVdTcUo6zsrIOnrWsWxkGOyU4mXrP9EeFuD9YgOEii+peVeEkq2uP1 OOHFXfPpFC6EFc3KRg5kMSGCi8tKWvGMooiOPsJ4Ro4WtkdwB9qg6G67+vuqyNss T50w9Hs/tfxsm6dkA+aloGB4g73eCmbEvxFuer1eC0Y6lHjdiT738aN+stXOaQHC ffi2tJFnwX5sBxVqUMsWWrFiWyDabgA9ZVV2VFIW08V0EPiPta31VsKsjww249xH H6D+rWV+uP8XZFjO1G4xI9b/DRuzr+A= -----END CERTIFICATE-----Generated at Sat Oct 3 14:27:34 2026 by rpki-client